Skip to main content

Troubleshooting for Cloud Agent

Most frequently seen Zenarmor Cloud Agent issues and their solutions are given below.

Node not connected error in Cloud Portal​

If you are getting a connection error for your node on the Zenarmor Cloud Portal, or if you see cloud server connection problem messages in the dashboard or reports, here are the steps you should follow in order to solve the problem.

Node not connect error

Figure 1. Node not connect error

Timeout exceeded

Figure 2. Timeout exceeded

  1. Stop the zenarmor-agent services running the following command on CLI:

    zenarmorctl cloud stop

  2. Check whether any zenarmor cloud service is running:

    ps awx | grep zenarmor-agent | grep -v grep

  3. If any service is running, kill the process. Make sure you don't have any leftover zenarmor-agent processes:

    kill -9 `ps -awx | grep zenarmor-agent | grep -v grep | awk '{print $1}'`

  4. Then start the service again:

    zenarmorctl cloud start

    Starting senpai. INFO[0000] LoadEngineWorkers: read 1 workers

  5. Go to the directory where cloud_agent.log file is located. This file is stored in /usr/local/sensei/log/active/ on OPNsense firewall but in /usr/local/zenarmor/log/active/ on other platforms like pfSense Software.

    cd /usr/local/sensei/log/active/

    Or

    cd /usr/local/zenarmor/log/active/

  6. Check the cloud_agent.log file with command:

    tail -f cloud_agent.log

    You should see the output similar to the following:

    [2021-10-15T18:37:33][INFO] Starting ZENARMOR(tm) Cloud Agent 1.10.2
    [2021-10-15T18:37:33][INFO] Pid 59802 running on OPNsense.localdomain (OPNsense 21.7.3_3 OpenSSL)
    [2021-10-15T18:37:33][INFO] current settings version is 1.10 and Report database type is 1
    [2021-10-15T18:37:34][INFO] Connected to the NAB!

If you see the message "Connected to the NAB!" troubleshooting is successfully done.

For unresolved issues, please do not hesitate to contact Zenarmor Support.

Why I can not register my OPNsense node to Zenconsole?​

In some cases, users may not register their OPNsense firewalls to Zenconsole, the centralized cloud management portal, by clicking on the Register to Cloud Management Portal button on the Cloud Management Portal page of the Zenarmor Configuration. If you are encountering a Zenconsole registration problem, you must ensure that the pop-up blocker on your browser is not enabled.

In case a pop-up blocker is enabled on your browser, you can not register your OPNsense node to Zenconsole. Since it blocks your OPNsense node to associate with your Zenconsole account via browser.

You should disable the pop-up blocker or complete the Zenconsole registration by running the next command on OPNsense CLI.

zenarmorctl cloud register